Legal
Effective September 15, 2026
This policy explains what War of the Generals collects, why, who else sees it, and what you can ask us to do about it. It describes the Service as it is actually built, not as a template imagines it: the fields in our database, the one cookie we set, and the keys we write to your browser are all named below.
Each section opens with a plain-language summary in italics. The rules that govern play are in a separate document — the Terms of Service.
A short, accurate summary. The sections that follow give the detail.
Sienna Logic LLC is the controller. This covers the site, the game servers and our apps.
War of the Generals (the “Service”) is operated by Sienna Logic LLC, a Texas limited liability company (“Sienna Logic”, “we”, “us”). For the purposes of the GDPR and similar laws, Sienna Logic is the controller of the personal data described here.
This policy covers generalsgame.com, the game servers behind it, and any mobile application we publish under the same name. It does not cover other websites you reach from ours, including the sites of Google and GitHub when you choose to sign in through them; those have their own policies.
An email address and callsign if you register. A formation when you save one.
Account details. If you register with an email address, we store that address (lower-cased, so that identity is case-insensitive), the callsign you choose, and the date you registered. Your password is stored only as a salted one-way hash — we cannot read it, recover it, or tell you what it is.
Social sign-in. If you sign in with Google or GitHub, we receive your email address from the provider, whether the provider considers it verified, and the provider’s own identifier for you. We store the provider’s name and that identifier so we can recognise you next time. We never receive your password. We link a social sign-in to an existing account only when the provider tells us the email address is verified, so that no one can take over an account by claiming an address at a provider.
Game content. Formations you save, and the names you give them. The display name you type when playing as a guest.
Correspondence. If you email us, we keep your message and our reply so we can deal with it and refer back to it. If you use the contact form, we receive the topic you choose, your email address, any name you give, your message, and — if you are signed in — your callsign and account identifier. The form delivers your message to our inbox as an email; it is not stored in our database.
Server logs from our host, and the record of online games so they can be replayed.
Technical and log data. Our hosting provider, Cloudflare, processes the ordinary technical information involved in serving a website — IP address, browser user-agent, the page or endpoint requested, timestamps, and similar — to deliver the Service, protect it against attack and abuse, and diagnose faults. We do not build profiles from this, and we do not connect it to your account beyond what is necessary for security.
Game records. When a game against another person finishes, we record the room it was played in, both display names, the account identifiers of any signed-in players, the winner and the reason, the start and end times, and the full move log together with both starting armies. The move log is a structured record of positions, challenges and announcements — it does not contain either player’s name. The display names are held only in the two name fields on the record. That record is what makes a replay possible.
No analytics, no ads, no payment data, no location, no data bought from anyone.
We have not sold personal data, and have not shared it for cross-context behavioural advertising, in the twelve months before the date at the top of this page. We do not intend to start.
To run the game, keep it fair, keep it secure, and answer your messages.
We do not send marketing email. We do not carry out automated decision-making that produces legal effects concerning you or similarly significantly affects you.
In the United States, on Cloudflare’s network.
The database that holds accounts, formations, and game records is operated by Cloudflare and located in the United States. Requests are served from Cloudflare’s global network, which means technical data may be processed at the location nearest you before reaching us. If you are in the European Economic Area, the United Kingdom, or the Philippines, your information is transferred to the United States; we rely on the Standard Contractual Clauses incorporated into our agreement with Cloudflare, together with the technical measures described in section 11, as the safeguard for those transfers. You can ask us for more detail at any time.
Accounts until you ask us to delete them. Sessions expire after 30 days.
Hashed passwords, hashed session tokens, encryption in transit.
No system is perfectly secure. If we become aware of a breach affecting your personal data, we will notify you and the relevant authorities where the law requires it, and without undue delay.
Email hello@generalsgame.com. We answer within 45 days, and deletion is done within 30.
Wherever you live, we will honour the following requests about the information we hold about you:
HOW TO MAKE A REQUEST
Email hello@generalsgame.com from the address on your account, and say what you would like us to do. We will respond within 45 days. If a request is complex we may take a further 45 days, and we will tell you why before the first period ends. There is no charge unless a request is manifestly unfounded or excessive.
You can delete your own account at any time from your Service Record page, without asking us. It takes effect immediately. If you would rather we did it, or you can no longer sign in, email us and we will complete the deletion within 30 days of verifying the request.
We may need to verify that a request really comes from you, usually by asking you to confirm from the email address on the account. An authorised agent may act for you with written permission.
If we say no. You may appeal by replying to our decision and asking us to reconsider. We will respond to an appeal within 60 days, and if we still decline we will tell you how to complain to your data protection authority.
Extra rights that apply depending on where you live.
European Economic Area and United Kingdom. Sienna Logic LLC is the controller. The legal bases we rely on are set out in section 6. In addition to the rights in section 12, you may lodge a complaint with your local supervisory authority, or with the Information Commissioner’s Office in the United Kingdom.
California. Under the CCPA as amended by the CPRA, the categories we collect are identifiers (email address, callsign, account and provider identifiers, IP address), internet or network activity (requests to the Service), and your own content (formations and game records). We collect them for the business purposes in section 6, from you and from your device. We do not collect sensitive personal information, and we have not sold or shared personal information for cross-context behavioural advertising. You have the rights to know, delete, correct, and to limit use of sensitive information, and we will not discriminate against you for exercising them.
Texas. Under the Texas Data Privacy and Security Act you may confirm whether we process your data, access and correct it, obtain a portable copy, delete it, and appeal a refusal as described in section 12. We do not sell personal data or sensitive data, and we do not process personal data for targeted advertising or profiling.
Philippines. Under the Data Privacy Act of 2012 you have the rights to be informed, to access, to object, to erasure or blocking, to rectification, to data portability, and to damages, and you may complain to the National Privacy Commission.
The Service is not for children under 13.
The Service is not directed to children under 13, and we do not knowingly collect personal data from them. If you are a parent or guardian and believe your child has given us personal data, email hello@generalsgame.com and we will delete the account and its data. See also section 2 of the Terms of Service.
Material changes are posted at least 14 days before they take effect.
We may update this policy as the Service changes. The effective date at the top always reflects the current version. If a change materially affects how we handle your personal data, we will post notice on the Service at least 14 days before it takes effect and, where we hold your email address, send it there as well. If a change requires your consent under applicable law, we will ask for it before relying on it.
Sienna Logic LLC, hello@generalsgame.com.
For any question about this policy, or to exercise a right described in section 12, contact Sienna Logic LLC at hello@generalsgame.com. We will provide a postal address on request.